Senior Cyber Security Engineer

PsychPlus is seeking a Senior Cyber Security Engineer to enhance our cloud security, application security, and compliance efforts. In this role, you will collaborate closely with Security Leadership, Product, and Engineering teams to safeguard our cloud infrastructure, protect sensitive patient data, and develop automated security controls throughout our technology environment. We are looking for a proactive security professional with deep expertise in Microsoft Azure, DevSecOps, vulnerability management, and security automation who can strengthen security measures without hindering development speed.

Key Responsibilities
- Lead the identification, assessment, prioritization, and remediation of vulnerabilities across applications and cloud infrastructure.
- Collaborate with Product and Engineering teams to implement secure coding practices, conduct threat modeling, and define application security requirements.
- Integrate and manage SAST, DAST, and SCA security tools within CI/CD pipelines to ensure continuous security testing.
- Secure PsychPlus’s internal Electronic Health Record (EHR) platform and protect sensitive patient information in compliance with healthcare regulations.
- Configure, manage, and optimize Microsoft Entra ID (Azure AD), including Conditional Access policies to enforce access controls.
- Deploy, configure, and monitor Microsoft Defender across endpoints, cloud workloads, and infrastructure for comprehensive threat protection.
- Strengthen cloud security controls and governance across the technology ecosystem to maintain a robust security posture.
- Support SOC 2 certification and HIPAA compliance by implementing and validating necessary technical controls.
- Identify security gaps, coordinate audit remediation efforts, and verify corrective actions with Engineering teams.
- Assist with security incident investigations, alert triage, threat response, and continuous improvements to incident response workflows.
- Develop security automation scripts using PowerShell, Python, or similar tools to streamline security operations.
- Provide Security Leadership with guidance on technical risks, security enhancements, and cloud governance initiatives.

Required Qualifications
- Minimum of 5 years of experience in Cyber Security Engineering, focusing on DevSecOps, Application Security, or Product Security.
- Hands-on expertise with Microsoft Azure, Microsoft Entra ID (Azure AD), Conditional Access policies, and Microsoft Defender.
- Proven ability to manage vulnerability scanners, interpret findings, prioritize risks, and drive remediation efforts in collaboration with Engineering teams.
- Strong understanding of CI/CD pipelines, containerization, DevSecOps practices, and secure software development lifecycle (SDLC).
- Experience integrating security testing tools such as SAST, DAST, and SCA into development pipelines.
- Solid knowledge of HIPAA requirements and SOC 2 Trust Services Criteria, with practical experience implementing technical security controls.
- Capability to configure cloud security settings, troubleshoot technical issues, and enforce security policies effectively.
- Excellent verbal communication skills in English and ability to collaborate across Product, Engineering, and Security Leadership teams.
- Ability to balance security needs with development velocity to support business objectives.

Preferred Qualifications and Benefits
- Experience securing Electronic Health Record (EHR) systems or working within regulated healthcare environments.
- Relevant certifications such as Microsoft AZ-500, CISSP, or CSSLP.
- Proficiency in security scripting and automation using PowerShell, Python, or similar tools.

This role offers the opportunity to make a significant impact on the security posture of a healthcare technology company, working with cutting-edge cloud and security technologies in a collaborative and fast-paced environment.